Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: EMARyOVhHFS0QJ60jP/SEXEAhKnecU3Ol1K9hv2Qy2A=
Subject key identifier: F5:C4:52:1D:73:B3:D8:C2:59:6E:3B:0F:9B:FE:EC:45:A1:43:E9:40
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 01958F2A2FD69BFEA197B901C497FCE7D58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 11AA
Signing time: Thu 13 Mar 2025 11:01:01 +0000
Manifest this update: Thu 13 Mar 2025 11:01:01 +0000
Manifest next update: Fri 14 Mar 2025 11:01:01 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: ukOsLtGlMYfeMY9CMKCYHihWurYWHmhLkyiuBEEeFaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:2f:d6:9b:fe:a1:97:b9:01:c4:97:fc:e7:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Mar 13 11:01:01 2025 GMT
Not After : Mar 14 11:01:01 2025 GMT
Subject: CN=f5c4521d73b3d8c2596e3b0f9bfeec45a143e940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:05:fc:63:1b:8d:14:ee:3c:85:6e:7c:fb:
c9:20:fc:f4:8f:47:16:1a:64:35:e9:0a:c1:fc:2f:
65:4e:15:95:c6:44:d2:f8:e0:8e:6f:24:81:8f:7a:
a0:fa:d5:c3:ab:b1:ee:c9:9f:43:a2:fe:54:95:b3:
de:fa:64:12:22:b5:89:58:c5:44:30:24:6d:bf:89:
e6:97:6b:51:ee:ee:ac:0e:5c:f1:c1:18:24:eb:ed:
bf:96:2c:21:cd:9e:6d:e9:e2:83:61:74:25:c3:ba:
b4:18:2e:f3:e2:c6:ce:9a:6f:c2:34:b6:00:36:f0:
02:22:b0:bb:63:b7:d2:c8:44:d9:95:43:84:94:5e:
99:e3:8a:3b:5e:76:7e:39:8b:51:d1:66:d4:8f:28:
09:d2:54:d2:a8:af:80:3d:56:9a:30:1e:cd:ee:4e:
37:28:e0:78:48:fc:a9:20:ed:3d:dc:de:f3:79:9b:
ee:9f:2e:1b:9e:aa:bf:a6:17:c2:69:d6:29:b1:5b:
e2:5a:c4:e1:5d:9b:35:a1:38:16:3b:20:14:8b:9f:
11:eb:66:14:95:24:07:5d:83:a8:cd:1d:08:07:64:
d8:ba:08:af:49:78:b7:f6:c2:39:3f:46:8b:73:8b:
92:17:24:4a:af:ad:4b:6c:18:0b:f5:bd:3d:fe:23:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:52:1D:73:B3:D8:C2:59:6E:3B:0F:9B:FE:EC:45:A1:43:E9:40
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:ce:f1:d1:1c:e8:69:84:5d:8f:07:02:8a:f4:23:39:36:
ed:ba:fe:06:98:46:d0:90:59:07:b3:4d:a6:78:20:06:91:9c:
e1:b5:54:28:92:35:0e:2a:51:60:9b:05:77:ce:4e:cd:0e:c9:
93:ee:12:63:d7:09:ea:7f:1a:ad:07:89:35:7a:71:de:cc:a7:
70:13:75:88:8c:92:20:54:f4:8a:33:91:a8:70:63:26:41:f2:
ae:da:8c:db:5a:d5:fa:c2:88:8b:a2:73:19:dc:46:61:bf:19:
4b:59:6d:41:59:0d:8b:11:d5:f0:33:61:04:fe:df:42:d6:04:
ca:b8:fd:bf:d7:5a:0a:76:c6:4e:6b:86:0e:29:de:47:4f:c9:
e6:3a:d4:35:9c:13:59:c0:6f:b4:f9:3c:62:89:8b:4e:85:68:
4d:15:17:e4:25:c4:ad:6b:22:4f:c2:14:4c:24:41:8b:ba:7f:
3e:6a:df:cb:fc:60:8c:14:62:98:1e:dc:ba:93:83:81:83:c2:
bd:1e:61:99:08:83:c6:5e:af:d3:bf:a0:2c:7b:5e:cf:29:40:
98:d3:06:b9:77:8e:17:e3:c7:d4:60:75:f5:9d:52:96:36:78:
d8:1c:2d:52:3d:a0:bf:b0:d6:fc:6f:e9:37:a2:bf:64:c3:d1:
69:1b:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:28 2025 by rpki-client